Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json)
Hash identifier: BF/mHd8ilVKixZbFYmJ5QSaNL4kTL1IX6VHs3+dgOLw=
Subject key identifier: 9C:C2:BC:E9:B5:1C:C8:E7:BE:5E:31:07:F6:30:17:B5:F8:C7:6E:D2
Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Certificate serial: 019D38D3CD9E910F3C03720F815EA97B349C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
Manifest number: 0330
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: MGPa/1lm5xsK7ELJhRvsl0Xr0t9TaVmJq1PBXcTxPxo=)
2: vSoBznDbkikChHtY3NKyw5nmxlM.roa (hash: rSKQo5evduX7uHTKdQHTDx+TSA/wtivZWu5lTBpqgRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cd:9e:91:0f:3c:03:72:0f:81:5e:a9:7b:34:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=9cc2bce9b51cc8e7be5e3107f63017b5f8c76ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:d9:15:08:27:33:a3:9c:6a:2e:c7:d1:58:
8a:c6:62:65:2d:26:27:ff:d5:e9:cb:61:9b:56:d6:
1b:88:f0:68:0c:3f:15:83:56:67:73:21:e9:a3:7f:
bc:33:13:57:93:fd:3e:54:fb:70:c7:a9:60:56:45:
45:48:f0:3b:c0:98:de:22:3d:19:47:30:4e:ae:e7:
fa:f2:7a:d9:39:53:28:b9:16:21:30:0b:58:48:dd:
cb:a9:32:02:dd:4c:a5:60:8a:4e:8b:e2:dd:2f:d8:
d9:2d:e9:d2:e2:0f:40:fe:f1:7c:46:2d:d6:fb:df:
01:f2:0d:4b:52:21:e4:7e:06:60:96:6e:0b:7c:58:
b1:c7:64:42:f4:1b:26:17:8d:3e:2d:42:a5:e4:3b:
60:51:00:f8:47:a7:a3:5f:95:64:f6:af:d7:a7:00:
a3:a5:95:a5:01:98:bd:44:84:2c:5a:21:95:25:2f:
57:bc:e5:27:c3:a7:5c:ef:d7:87:4f:3f:e9:bf:bd:
0b:6e:c0:70:0a:e7:0f:fd:bc:9a:6a:d5:98:c2:7f:
84:14:98:ad:9a:bb:f6:11:a7:02:27:d5:69:9d:8e:
2d:9b:61:a4:d6:dd:72:36:96:49:c3:24:8e:f5:32:
1f:fb:03:e2:a5:17:6a:b0:9c:cb:4f:97:86:e3:84:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:BC:E9:B5:1C:C8:E7:BE:5E:31:07:F6:30:17:B5:F8:C7:6E:D2
X509v3 Authority Key Identifier:
keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:c5:35:57:15:cf:80:73:af:a4:e4:a4:6e:54:1e:8f:36:
d5:f4:dd:95:be:5a:97:fd:be:b9:14:b3:bd:43:be:02:c5:6d:
0e:41:6b:7a:6c:53:d6:0c:dc:0f:1c:a0:ff:0e:f6:6a:ff:dc:
18:98:18:b2:8a:39:db:5d:af:c3:6c:5b:7e:b0:aa:53:5e:11:
c5:b6:fc:00:78:20:28:92:96:14:66:8a:3b:3e:50:31:63:f5:
60:40:2e:82:bb:ca:ce:4d:6c:f0:23:59:f1:33:c3:57:8f:0b:
b5:b4:75:ba:d6:8b:b4:45:29:65:cb:23:24:e2:1a:d2:49:71:
59:2c:9d:4f:78:2b:fd:c7:8c:01:66:e8:ff:6c:a4:cd:e4:5e:
dc:fa:95:0b:19:43:11:58:83:11:ea:63:2c:e6:3c:98:07:2c:
a3:05:a1:0e:3f:1c:bf:27:86:b3:28:26:76:7c:cd:d0:73:aa:
eb:c3:05:35:52:3d:ef:84:0c:55:5d:96:16:ba:0b:5e:69:64:
f7:e5:63:b8:0a:04:d2:fd:af:c8:ba:69:51:16:69:b1:5e:c6:
67:f0:59:e9:28:92:d2:fe:cf:47:98:0b:d3:29:24:fc:98:05:
57:9b:22:6c:9c:5c:67:55:e1:32:a8:7b:8d:49:e9:48:5b:64:
8f:38:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:42 2026 by rpki-client